Overview

overview

10

Static

static

10

9874885c84...5N.exe

windows7-x64

10

9874885c84...5N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9874885c84aff39e72bec9565ff5018e2a4ff90771e8d5eec70f7b381c9dbdb5N

  • Size

    3.6MB

  • MD5

    2637b46b336ad1cc341d987cb0d7d8d0

  • SHA1

    6861531b4795ff56837ca77c938b24fd3cecd20d

  • SHA256

    9874885c84aff39e72bec9565ff5018e2a4ff90771e8d5eec70f7b381c9dbdb5

  • SHA512

    e0a765752f74f6b08f8ce9d8830d288aa696c0170173693b282f00665d270e31b1479448ee0ac6bc5219509a3c17cfb928d48f34026f665e5529101a516ae657

  • SSDEEP

    98304:Dg2KK3z9OP+9Rqc7oaZjco177GBfWeLwlYwEXU:E2KKjQ+9RZ7uoZGBfWx

Score
10/10
upxisfbminerblackmoongozixmrig

Malware Config

Extracted

Family

gozi

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 2 IoCs
  • Gozi family
    gozi
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9874885c84aff39e72bec9565ff5018e2a4ff90771e8d5eec70f7b381c9dbdb5N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections